Is there a way to see what is being passed throught the JAAS classes, or to get at the values? I turned the the logging for security to debug. Is there any other way to test this stuff. I am not sure what is being retrurned from the rolesQuery.